Main menu

Tor 0.2.8.7 is released, with important fixes

Tor 0.2.8.7 fixes an important bug related to the ReachableAddresses option in 0.2.8.6, and replaces a retiring bridge authority. Everyone who sets the ReachableAddresses option, and all bridges, are strongly encouraged to upgrade.
You can download the source from the Tor website. Packages should be available over the next week or so.

Below is a list of changes since 0.2.8.6.

Changes in version 0.2.8.7 - 2016-08-24

Directory authority changes:

The "Tonga" bridge authority has been retired; the new bridge authority is "Bifroest". Closes tickets 19728 and 19690.

Major bugfixes (client, security):

Only use the ReachableAddresses option to restrict the first hop in a path. In earlier versions of 0.2.8.x, it would apply to every hop in the path, with a possible degradation in anonymity for anyone using an uncommon ReachableAddress setting. Fixes bug 19973; bugfix on 0.2.8.2-alpha.

Minor features (geoip):

Update geoip and geoip6 to the August 2 2016 Maxmind GeoLite2 Country database.

Minor bugfixes (compilation):

Remove an inappropriate "inline" in tortls.c that was causing warnings on older versions of GCC. Fixes bug 19903; bugfix on 0.2.8.1-alpha.

Having intermittent trouble with meek-azure. Sometimes work fine, but most of time tor stuck establishing directory connection and simply sends regular interval keep alive traffic to azure server but does not proceed to connect and eventually times out. meek-amazon work fine. Note this in China, but had same issue in other countries.